This is as good of a demonstration of the big "common sense" gap that end-to-end computer vision approaches have as it is of adversarial examples. Even with an occluded speed limit sign, humans have strong priors on what a sensible speed limit would be based on a more general understanding of the environment (width of lanes, curvature of roads, visibility, road quality, frequency of law enforcement vehicles ;), etc.).